Threat Investigation
Request a demo
Cybercrime

VantaCore

VantaCore is classified as cybercrime.

Origin
Ukraine
Also known as
1

VantaCore is a ransomware group believed to be a rebrand of Thor, targeting Russian organizations with custom-built malware and multimillion-dollar ransom demands. F6 says the group has attacked at least seven victims, uses a ransomware-as-a-service model, and reflects a broader shift among pro-Ukrainian hackers toward in-house tooling instead of LockBit 3 Black and Babuk.

The group's reported origin is Ukraine.

Also known as: Thor

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

VantaCore · Threat actors · Dark Radar